Close Menu
Peter Klapwijk – In The Cloud 24-7Peter Klapwijk – In The Cloud 24-7
    Facebook X (Twitter) Instagram
    Peter Klapwijk – In The Cloud 24-7Peter Klapwijk – In The Cloud 24-7
    • Home
    • Intune
    • Windows
      • Modern Workplace
    • macOS
    • Android
    • iOS
    • Automation
      • Logic Apps
      • Intune Monitoring
      • GitHub
    • Security
      • Passwordless
      • Security
    • Speaking
    • About me
    Peter Klapwijk – In The Cloud 24-7Peter Klapwijk – In The Cloud 24-7
    Home»Intune»Configure Windows 10 power settings using Microsoft Intune
    Intune

    Configure Windows 10 power settings using Microsoft Intune

    Peter KlapwijkBy Peter KlapwijkJuly 4, 2019Updated:December 3, 201925 Mins Read

    Today a short blog about configuring Windows 10 power settings using Microsoft Intune. As these settings (at the moment of writing) cannot be set using the Device Management portal, we are assigned to use the Policy configuration service provider (CSP). When using the CSP, it can sometimes be challenging what we exactly need to configure in a custom Intune profile. I hope by providing a few examples in this post, you`re able to configure all the power settings you need.

    If you are unfamiliar with these kind of custom Intune policies, I suggest to read this article about ADMX-backed policies. It provides you a good introduction and background information about using CSP.
    A complete overview of the available settings via CSP can be found here. We are interested in the power settings which we can find here.

    For every setting we we set using CSP, we need to know the OMA-URI, data type and the value we need to set. This information can be found at the docs.microsoft.com articles like the one for the power options and sometimes we need to check the corresponding ADMX file to collect some more information.

    CSP with data type Integer

    We start with a setting which we set using data type Integer, as this is the one most easy. In the example I want to set the behavior of the Power Button, when the device is pluggedin, to shutdown the system. This can be done by using the Power/SelectPowerButtonActionPluggedIn CSP. As you can see on the docs page when you lookup this setting, this is a Device policy (scope). This is both information we need to use in the custom Intune policy later in the OMA-URI.

    You can also find the corresponding ADMX info and below that we see we have 4 options we can set for SelectPowerButtonActionPluggedIn. Every option we have is tied to a number. Usually when the option of a setting can be set using a number, that tells us the data type of the setting is Integer and that number is our value to set.
    With the information we now have collected, we are able to create a custom Intune policy:
    OMA-URI: ./Device/Vendor/MSFT/Policy/Config/Power/SelectPowerButtonActionPluggedIn
    Data type: Integer
    Value: 3 (if you want it to be set to System shutdown)

    Now that we have all the necessary information, let`s create a Intune profile and use it to set this power option.

    • Sign-in to the Device Management Portal
    • Browse Device Configuration – Profiles
    • Click Create Profile
    • Give the policy a Name
    • Fill in the Description (optional)
    • Choose Windows 10 and later as Platform
    • Choose Custom as Profile type
    • Click the Settings tab
    • Click Add

    In the row we need to use the information we collected in the previous steps.

    • Give the row a Name
    • Give the row a Description (optional)
    • OMA-URI: ./Device/Vendor/MSFT/Policy/Config/Power/SelectPowerButtonActionPluggedIn
    • Data type: Integer
    • Value: 3
    • Click OK twice
    • Click Create

    By creating this row, we have set our first power option.

    CSP with data type String

    The next option is using data type String. In the Tip part you can read this is a ADMX-backed policy and requires a special SyncML format to enable or disable. With this information, we know the data type must be set to String in the Intune policy. Again this is a Device scope.

    To collect more required information, to set in the value box of the policy we need to use the power.admx file which we can find on a Windows 10 device at the location C:\Windows\PolicyDefinitions. GP ADMX file name shows which ADMX file contains the required information.
    If you open that file in a text editor like Notepad++, search for the GP name, in this case ACHibernateTimeOut_2. This provides us all necessary information we need. It provides is an ID, in this case EnterACHibernateTimeOut_2, which we set in the value box as the data ID. It also shows us information about the value we can use, in this case it tells us the max value we can set.
    The collected information:
    OMA-URI: ./Device/Vendor/MSFT/Policy/Config/Power/HibernateTimeoutPluggedIn
    Data type: String
    Value: <enabled/><data id=”EnterACHibernateTimeOut” value=”4294967295″ />

    row

    Switch back to the Device Management Portal and edit the previously configured profile to ad an extra row.

    • Give the row a Name
    • Give the row a Description (optional)
    • OMA-URI: ./Device/Vendor/MSFT/Policy/Config/Power/HibernateTimeoutPluggedIn
    • Data type: String
    • Value: <enabled/><data id=”EnterACHibernateTimeOut” value=”4294967295″ />
    • Click OK

    The third example also uses the data type string, but unlike the previous setting, I want to set that setting to disabled so the standby states (S1-S3) are not allowed.
    To set a setting to enabled we use <enabled/> in the policy. Then ofcourse we use <disabled/> to disable the policy. As we don`t have to set another value, like we need to do when we set a policy to enabled, we already have collected all the necessary information for this setting.
    OMA-URI: ./Device/Vendor/MSFT/Policy/Config/Power/AllowStandbyWhenSleepingPluggedIn
    Data type: String
    Value: <disabled/>

    Switch back to the Device Management Portal and edit the previously configured profile to ad an extra row.

    • Give the row a Name
    • Give the row a Description (optional)
    • OMA-URI: ./Device/Vendor/MSFT/Policy/Config/Power/AllowStandbyWhenSleepingPluggedIn
    • Data type: String
    • Value: <disabled/>
    • Click OK

    The only thing left is to assign the policy to a security group and you have successfully configured Windows 10 power settings using Microsoft Intune. Very handy when you create a Kiosk device like I did in a previous blog 😉

    NB: As WordPress changes the ” quotation marks in the articles, don`t copy-paste the provided values in your Intune policy. First copy the information in a text editor en replace the quotation marks.

    Autopilot Azure AD EMS Intune KIOSK MEM Microsoft 365 Microsoft Endpoint Manager Windows10
    Share. Facebook Twitter LinkedIn Email WhatsApp
    Peter Klapwijk
    • Website
    • X (Twitter)
    • LinkedIn

    Peter is a Security (Intune) MVP since 2020 and is working as Modern Workplace Engineer at Wortell in The Netherlands. He has more than 15 years of experience in IT, with a strong focus on Microsoft technologies like Microsoft Intune, Windows, and (low-code) automation.

    Related Posts

    Configure Windows 10 time zones with Microsoft Intune

    August 14, 2019

    Setup a Windows 10 Multi App Kiosk device with Microsoft Intune

    August 6, 2019

    Setup a Windows 10 kiosk device using Intune and AutoPilot

    May 4, 2019
    View 2 Comments

    2 Comments

    1. Rob on June 9, 2021 14:31

      Hi Peter,

      Thanks for your posts, they are really helpful. I am currently configuring devices in “shared pc” as Kiosk was quite limited in trying to get apps working etc.

      I am trying to define a custom policy that when the device is inactive for say 30 minutes, it goes to sleep. I see there is “UnattendedSleepTimeOutAC” however, having a few issues getting this to work.

      Getting:

      ERROR CODE
      0x87d1fde8
      ERROR DETAILS
      Remediation failed

      Please could you advise if the below is correct:

      ./Device/Vendor/MSFT/Policy/Config/Power/UnattendedSleepTimeOutAC

      Thank you

      Reply
      • Peter Klapwijk on June 15, 2021 21:00

        Hi Rob,

        No that’s not right. Have a look at https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-power#power-unattendedsleeptimeoutpluggedin

        You have used the GP Name, but you should use Power/UnattendedSleepTimeoutPluggedIn

        regards,

        Peter

        Reply
    Leave A Reply Cancel Reply

    Peter Klapwijk

    Hi! Welcome to my blog post.
    I hope you enjoy reading my articles.

    Hit the About Me button to get in contact with me or leave a comment.

    Awards
    Sponsor
    Latest Posts

    Intune connector for Active Directory configuration error

    August 29, 2025

    Deploy Microsoft Defender updates in deployment rings

    July 4, 2025

    Create deployment ring groups for Microsoft Intune

    June 27, 2025

    Update Windows Defender during Windows Autopilot enrollments

    May 16, 2025
    follow me
    • Twitter 4.8K
    • LinkedIn 6.1K
    • YouTube
    • Bluesky 1.5K
    Tags
    Administrative Templates Android Automation Autopilot Azure Azure AD Browser Conditional Access Edge EMS Exchange Online Feitian FIDO2 Flow Google Chrome Graph Graph API Identity Management Intune Intune Monitoring iOS KIOSK Logic Apps macOS MEM MEMMonitoring Microsoft 365 Microsoft Defender Microsoft Edge Microsoft Endpoint Manager Modern Workplace Office 365 OneDrive for Business Outlook Passwordless PowerApps Power Automate Security SharePoint Online Windows Windows 10 Windows10 Windows 11 Windows Autopilot Windows Update
    Awards
    Sponsor
    Follow me on Twitter
    Tweets by inthecloud_247
    Tags
    Administrative Templates Android Automation Autopilot Azure Azure AD Browser Conditional Access Edge EMS Exchange Online Feitian FIDO2 Flow Google Chrome Graph Graph API Identity Management Intune Intune Monitoring iOS KIOSK Logic Apps macOS MEM MEMMonitoring Microsoft 365 Microsoft Defender Microsoft Edge Microsoft Endpoint Manager Modern Workplace Office 365 OneDrive for Business Outlook Passwordless PowerApps Power Automate Security SharePoint Online Windows Windows 10 Windows10 Windows 11 Windows Autopilot Windows Update
    Archives
    Peter Klapwijk

    Hi! Welcome to my blog post.
    I hope you enjoy reading my articles.

    Hit the About Me button to get in contact with me or leave a comment.

    Copy right

    This information is provided “AS IS” with no warranties, confers no rights and is not supported by the authors, or In The Cloud 24-7.

     

    Copyright © 2025 by In The Cloud 24-7/ Peter Klapwijk. All rights reserved, No part of the information on this web site may be reproduced or posted in any form or by any means without the prior written permission of the publisher.

    Shorthand; Don’t pass off my work as yours, it’s not nice.

    Recent Comments
    • Peter Klapwijk on Deploy Microsoft Defender updates in deployment rings
    • Magnus on Deploy Microsoft Defender updates in deployment rings
    • Gertjan Jongeneel on Add an Azure AD group to the local administrators group with Microsoft Intune
    • Peter Klapwijk on Add a certificate to the Trusted Publishers with Intune without reporting errors
    • Ram hIRANI on Add a certificate to the Trusted Publishers with Intune without reporting errors
    most popular

    Application installation issues; Download pending

    October 1, 2024

    How to change the Windows 11 language with Intune

    November 11, 2022

    Restrict which users can logon into a Windows 10 device with Microsoft Intune

    April 11, 2020

    Update Microsoft Edge during Windows Autopilot enrollments

    July 9, 2024
    Recent Comments
    • Peter Klapwijk on Deploy Microsoft Defender updates in deployment rings
    • Magnus on Deploy Microsoft Defender updates in deployment rings
    • Gertjan Jongeneel on Add an Azure AD group to the local administrators group with Microsoft Intune
    • Peter Klapwijk on Add a certificate to the Trusted Publishers with Intune without reporting errors
    • Ram hIRANI on Add a certificate to the Trusted Publishers with Intune without reporting errors
    Copy right

    This information is provided “AS IS” with no warranties, confers no rights and is not supported by the authors, or In The Cloud 24-7.

    Copyright © 2023 by In The Cloud 24-7/ Peter Klapwijk. All rights reserved. No part of the information on this web site may be reproduced or posted in any form or by any means without the prior written permission of the publisher.

    Shorthand: Don’t pass off my work as yours, it’s not nice.

    Peter Klapwijk – In The Cloud 24-7
    X (Twitter) LinkedIn YouTube RSS Bluesky
    © 2025 ThemeSphere. Designed by ThemeSphere.

    Type above and press Enter to search. Press Esc to cancel.

    Manage Cookie Consent
    To provide the best experiences, we use technologies like cookies to store and/or access device information. Consenting to these technologies will allow us to process data such as browsing behavior or unique IDs on this site. Not consenting or withdrawing consent, may adversely affect certain features and functions.
    Functional Always active
    The technical storage or access is strictly necessary for the legitimate purpose of enabling the use of a specific service explicitly requested by the subscriber or user, or for the sole purpose of carrying out the transmission of a communication over an electronic communications network.
    Preferences
    The technical storage or access is necessary for the legitimate purpose of storing preferences that are not requested by the subscriber or user.
    Statistics
    The technical storage or access that is used exclusively for statistical purposes. The technical storage or access that is used exclusively for anonymous statistical purposes. Without a subpoena, voluntary compliance on the part of your Internet Service Provider, or additional records from a third party, information stored or retrieved for this purpose alone cannot usually be used to identify you.
    Marketing
    The technical storage or access is required to create user profiles to send advertising, or to track the user on a website or across several websites for similar marketing purposes.
    Manage options Manage services Manage {vendor_count} vendors Read more about these purposes
    View preferences
    {title} {title} {title}